This comment has been minimized.

I did the #undef to vtls/schannel.h instead. Since that file usually is responsible for pulling in <wincrypt.h>. In ldap.c, it's pulled in via <winldap.h>. And ldap.c never includes any BoringSSL headers AFAICS. So I came up with this patch: